BEGIN:VCALENDAR
VERSION:2.0
PRODID:-//pretalx//cfp.hackfest.ca//hf2026//talk//SQRKCT
BEGIN:VTIMEZONE
TZID:EST
BEGIN:STANDARD
DTSTART:20001029T030000
RRULE:FREQ=YEARLY;BYDAY=-1SU;BYMONTH=10;UNTIL=20061029T070000Z
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:STANDARD
DTSTART:20071104T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=11
TZNAME:EST
TZOFFSETFROM:-0400
TZOFFSETTO:-0500
END:STANDARD
BEGIN:DAYLIGHT
DTSTART:20000402T030000
RRULE:FREQ=YEARLY;BYDAY=1SU;BYMONTH=4;UNTIL=20060402T080000Z
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
BEGIN:DAYLIGHT
DTSTART:20070311T030000
RRULE:FREQ=YEARLY;BYDAY=2SU;BYMONTH=3
TZNAME:EDT
TZOFFSETFROM:-0500
TZOFFSETTO:-0400
END:DAYLIGHT
END:VTIMEZONE
BEGIN:VEVENT
UID:pretalx-hf2026-SQRKCT@cfp.hackfest.ca
DTSTART;TZID=EST:20261030T113000
DTEND;TZID=EST:20261030T122000
DESCRIPTION:A compromised mailbox.\nOne fake invoice.\nOne Teams message.\n
 One trusted supplier.\n\n60 seconds later:\n$25\,000 is gone.\n\nWelcome t
 o cybercrime in 2026.\n\nThis talk dives into the industrialization of Bus
 iness Email Compromise (BEC) and modern financially motivated threat actor
 s like ShinyHunters\, showing how attackers evolved from “hackers” int
 o highly efficient cyber businesses.\n\nThe scary part?\nMost attacks no l
 onger rely on advanced malware or zero-days.\n\nThey rely on:\n- trust\n- 
 weak processes\n- social engineering\n- MFA fatigue\n- Shadow AI\n- overpr
 ivileged accounts\n- and humans moving too fast\n\nWe’ll break down real
 -world attack chains used today against organizations of all sizes:\nfrom 
 mailbox compromise to vendor impersonation\, internal fraud\, data theft a
 nd payment diversion.\n\nWe’ll also explore how modern threat actors wea
 ponize:\n- leaked credentials\n- infostealers\n- cloud identities\n- AI-ge
 nerated phishing\n- session hijacking\n- and trusted collaboration tools l
 ike Teams\, Slack and SharePoint\n\nAnd while everyone is chasing “next-
 gen AI security”…\nmany organizations still use weak passwords\, lack 
 MFA coverage\, have no tested recovery process\, and trust email far more 
 than they should.\n\nThis is no longer cybercrime.\nIt’s operationalized
  digital fraud at scale.\n\nParticipants will leave with:\n- A better unde
 rstanding of modern BEC tradecraft\n- Why attackers target finance and ope
 rations teams first\n- How ShinyHunters-style operations scale so efficien
 tly\n- The role AI and Shadow AI now play in fraud\n- Practical ways to re
 duce exposure immediately\n\nThe future of cybercrime is fast\, scalable a
 nd frighteningly human.
DTSTAMP:20261014T084537Z
LOCATION:Track 2 (306A)
SUMMARY:How to Make $25K in 60 Seconds in 2026: ShinyHunters\, BEC & the In
 dustrialization of Cybercrime - Julien Turcot
URL:https://cfp.hackfest.ca/hf2026/talk/SQRKCT/
END:VEVENT
END:VCALENDAR